Skip to content

fix(govulncheck): fix govulncheck reported vulns#1795

Merged
SimoneDutto merged 1 commit intocanonical:v3from
SimoneDutto:fix-govulncheck
Jan 9, 2026
Merged

fix(govulncheck): fix govulncheck reported vulns#1795
SimoneDutto merged 1 commit intocanonical:v3from
SimoneDutto:fix-govulncheck

Conversation

@SimoneDutto
Copy link
Contributor

@SimoneDutto SimoneDutto commented Jan 9, 2026 •
edited
Loading

Description

fix GO-2025-3533, GO-2025-4135, GO-2025-3922

There are still vulns coming from juju and lxd which is not properly versioned and govulncheck false reports them as still present.
I've filed an issue to see what to do, let's wait for it.

[11:53:05] ➜  jimm git:(fix-govulncheck) ✗ govulncheck ./... | grep "Module: "
  Module: github.com/canonical/lxd
  Module: github.com/canonical/lxd
  Module: github.com/canonical/lxd
  Module: github.com/juju/juju
  Module: github.com/juju/utils/v3
  Module: github.com/juju/juju
  Module: github.com/juju/juju
  Module: github.com/juju/juju

We still have a vuln from utils/v3 because we use cmd/v3.

Should fix one of the high security vuln we have:

@SimoneDutto
fix(govulncheck): fix govulncheck reported vulns
2f78976 
fix GO-2025-3533, GO-2025-4135, GO-2025-3922
@SimoneDutto SimoneDutto requested a review from a team as a code owner January 9, 2026 10:59
@SimoneDutto SimoneDutto merged commit 7b9d5c0 into canonical:v3 Jan 9, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@luci1900 luci1900 luci1900 approved these changes

@kian99 kian99 kian99 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@SimoneDutto @luci1900 @kian99